Approved changes feed: RSS · Atom

cpe:2.3:a:opentext:flipper:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpentext (5717091c-f148-5db6-be32-940ef0cdacf9)
ProductFlipper (4067b73b-4beb-5ac1-ab91-b66c172fa0ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8053 vulnerable 2026-06-03 15:13:42.118762 Insufficient access control vulnerability has been discovered in Opentext Flipper.
Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privileges. This issue affects Flipper: 3.1.2.
Published: 2025-10-20T19:55:17.290Z
Updated: 2025-10-20T20:11:50.018Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8052 vulnerable 2026-06-03 15:13:42.118334 HQL Injection vulnerability has been discovered in Opentext Flipper.
SQL Injection vulnerability in opentext Flipper allows SQL Injection.  The vulnerability could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor. This issue affects Flipper: 3.1.2.
Published: 2025-10-20T19:57:34.805Z
Updated: 2025-10-21T15:31:49.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8051 vulnerable 2026-06-03 15:13:42.117880 Path traversal validation vulnerability has been discovered in opentext Flipper.
Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal.  The vulnerability could allow a user to access files hosted on the server. This issue affects Flipper: 3.1.2.
Published: 2025-10-20T19:55:57.106Z
Updated: 2025-10-20T20:13:36.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8050 vulnerable 2026-06-03 15:13:42.117312 External Control of File vulnerability has been discovered in opentext Flipper.
External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal.  The vulnerability could allow a user to access files hosted on the server. This issue affects Flipper: 3.1.2.
Published: 2025-10-21T17:21:30.283Z
Updated: 2025-10-21T18:22:41.036Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8049 vulnerable 2026-06-03 15:13:42.116946 Insufficient Access Control vulnerability has been discovered in OpenText Flipper.
Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low-privilege user to elevate privileges within the application. This issue affects Flipper: 3.1.2.
Published: 2025-10-20T19:56:20.291Z
Updated: 2025-10-20T20:15:29.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8048 vulnerable 2026-06-03 15:13:42.115244 External Control of File path vulnerability has been discovered on Openext Flipper.
External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file path and then download the specified file from the system by requesting the stored document ID. This issue affects Flipper: 3.1.2.
Published: 2025-10-20T19:56:29.335Z
Updated: 2025-10-20T20:16:11.991Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.